CV0-003 · Question #77
An administrator is asked to securely upload a configuration file to a web server in a cloud. Which of the following protocols should be used in this scenario?
The correct answer is C. TLS. TLS is the correct protocol for securing data in transit to a web server, as it provides transport-layer encryption for HTTPS-based file uploads.
Question
An administrator is asked to securely upload a configuration file to a web server in a cloud. Which of the following protocols should be used in this scenario?
Options
- ASFTP
- BSSL
- CTLS
- DHTTP
How the community answered
(39 responses)- A3% (1)
- B5% (2)
- C90% (35)
- D3% (1)
Why each option
TLS is the correct protocol for securing data in transit to a web server, as it provides transport-layer encryption for HTTPS-based file uploads.
SFTP uses SSH for secure file transfer and is appropriate for SSH-enabled servers, but it is not a web protocol and is not used with servers that expect HTTP/HTTPS connections.
SSL is the older, deprecated predecessor to TLS and contains known cryptographic vulnerabilities, so TLS has superseded it for all secure web communications.
TLS (Transport Layer Security) encrypts data in transit between a client and a web server and is the foundation of HTTPS - the standard secure method for uploading files to web servers. When uploading a configuration file to a cloud web server, TLS ensures the file contents cannot be intercepted or tampered with during transmission. It is the current industry-standard replacement for SSL and is natively supported by all modern web servers and cloud platforms.
HTTP transmits data in plain text without any encryption, making it entirely unsuitable for securely uploading sensitive configuration files.
Concept tested: Secure file transfer protocol selection for web servers
Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview
Topics
Community Discussion
No community discussion yet for this question.